Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/340dae0d-e01b-3a4d-bec0-a4c3f0a9c7bc.roa
File:                     340dae0d-e01b-3a4d-bec0-a4c3f0a9c7bc.roa (raw, json)
Hash identifier:          MwpCBFV6u5nPgJJ52Nqolw1S52F9PFSCgUYVtDay+ss=
Subject key identifier:   0D:49:AF:E7:78:6B:37:76:B7:C8:40:17:C1:B7:E6:3D:26:C2:1C:26
Certificate issuer:       /CN=291133eb-e436-4803-adab-f37835fc18e3
Certificate serial:       010D0C9F43285848424AD2AFC3C2AA97DD166500
Authority key identifier: 18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/340dae0d-e01b-3a4d-bec0-a4c3f0a9c7bc.roa
Signing time:             Thu 19 Dec 2024 14:00:52 +0000
ROA not before:           Thu 19 Dec 2024 14:00:52 +0000
ROA not after:            Wed 19 Mar 2025 13:00:52 +0000
asID:                     11300
IP address blocks:        64.49.145.0/24 maxlen: 25
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:48:42:4a:d2:af:c3:c2:aa:97:dd:16:65:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=291133eb-e436-4803-adab-f37835fc18e3
        Validity
            Not Before: Dec 19 14:00:52 2024 GMT
            Not After : Mar 19 13:00:52 2025 GMT
        Subject: CN=b7204701-b14f-4b93-a892-0366f925f073
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:9b:95:1b:07:6a:0d:6e:9d:7d:22:d0:ad:4c:
                    d9:b0:aa:c0:f7:c6:b9:db:3d:b7:17:59:ae:4c:b8:
                    c0:4b:96:fb:80:e0:3d:9b:46:68:87:60:63:d4:21:
                    1a:86:26:5a:88:e1:6c:85:04:5d:a2:b2:75:c5:a6:
                    28:06:1f:e2:9d:00:42:57:ae:74:74:9e:f7:ee:b4:
                    71:d6:e4:72:a7:ae:30:f0:43:16:51:08:35:e5:03:
                    d0:47:e3:f8:74:d5:ce:a9:27:71:2e:7b:a8:6c:23:
                    fe:b3:34:28:23:af:c9:38:a1:eb:45:0f:18:1d:f3:
                    e4:bd:df:d1:8a:5c:41:99:24:a6:1a:dd:d7:49:12:
                    5f:84:80:cc:57:4a:c7:72:a3:56:8a:70:e2:77:33:
                    24:8e:dd:27:38:26:68:d8:3c:1e:f0:57:b9:bd:0f:
                    3e:2e:88:06:f7:f9:33:d2:92:03:e9:b4:9d:41:00:
                    55:14:50:91:c2:c7:52:3d:f6:5d:0a:ba:a6:ca:52:
                    2c:26:d1:58:37:1d:d4:c7:aa:8a:6e:51:89:e5:63:
                    4f:1b:9b:a4:f4:cb:63:f7:78:16:a3:f5:70:37:89:
                    c2:b3:31:65:c5:21:58:a8:30:e2:0f:bf:01:9e:a6:
                    2c:8c:e3:10:fa:cd:d6:89:75:41:ce:90:94:cb:fc:
                    84:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:49:AF:E7:78:6B:37:76:B7:C8:40:17:C1:B7:E6:3D:26:C2:1C:26
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/340dae0d-e01b-3a4d-bec0-a4c3f0a9c7bc.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3/291133eb-e436-4803-adab-f37835fc18e3.crl

            X509v3 Authority Key Identifier:
                keyid:18:52:49:3A:FC:EF:33:E3:F2:64:9C:F3:C6:0B:A2:50:5A:0C:1D:6B

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/291133eb-e436-4803-adab-f37835fc18e3.cer

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.49.145.0/24

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         43:59:fa:3f:e7:49:74:a2:22:d4:24:a7:d8:a8:00:44:76:c1:
         a4:bf:1f:73:22:9c:63:a9:9e:09:4a:54:27:17:dc:7d:8a:ca:
         5f:53:38:8f:cf:7e:63:0d:e2:c3:dc:d6:db:5c:4c:ee:ee:1c:
         4b:75:a8:54:4b:e5:c2:7a:3f:87:03:52:f2:34:80:88:36:44:
         8a:2b:14:0c:a4:09:ac:c0:1c:dd:2b:35:a5:46:99:b4:fd:2a:
         ff:e4:aa:10:c4:74:02:98:6a:29:0a:37:e5:75:c3:ef:be:aa:
         17:48:d1:20:5c:6a:45:0a:0d:4a:de:9d:41:8e:93:fb:5b:23:
         14:0e:91:90:9b:de:fa:99:5a:a5:8e:78:02:68:cf:a3:1d:ba:
         4c:d4:6d:1b:0a:b3:49:81:bd:b2:1a:57:4a:c0:c0:a3:7a:cc:
         45:67:ef:13:be:92:3d:a7:69:50:be:48:ac:c5:e0:69:9b:63:
         5f:ab:f0:4c:4b:07:05:32:6d:6a:5f:e7:73:7b:10:bc:87:0f:
         34:aa:e7:c6:bd:90:22:0c:55:b0:75:61:cc:6b:a9:37:0d:73:
         de:d7:83:cc:21:01:c7:52:14:18:61:58:92:e9:bb:62:4f:48:
         81:6c:e4:1a:d4:b5:7d:0c:90:25:9c:89:7a:17:0a:31:95:e7:
         43:fc:b9:48
-----BEGIN CERTIFICATE-----
MIIGQzCCBSugAwIBAgIUAQ0Mn0MoWEhCStKvw8Kql90WZQAwDQYJKoZIhvcNAQEL
BQAwLzEtMCsGA1UEAxMkMjkxMTMzZWItZTQzNi00ODAzLWFkYWItZjM3ODM1ZmMx
OGUzMB4XDTI0MTIxOTE0MDA1MloXDTI1MDMxOTEzMDA1MlowLzEtMCsGA1UEAxMk
YjcyMDQ3MDEtYjE0Zi00YjkzLWE4OTItMDM2NmY5MjVmMDczMIIBIjANBgkqhkiG
9w0BAQEFAAOCAQ8AMIIBCgKCAQEA45uVGwdqDW6dfSLQrUzZsKrA98a52z23F1mu
TLjAS5b7gOA9m0Zoh2Bj1CEahiZaiOFshQRdorJ1xaYoBh/inQBCV650dJ737rRx
1uRyp64w8EMWUQg15QPQR+P4dNXOqSdxLnuobCP+szQoI6/JOKHrRQ8YHfPkvd/R
ilxBmSSmGt3XSRJfhIDMV0rHcqNWinDidzMkjt0nOCZo2Dwe8Fe5vQ8+LogG9/kz
0pID6bSdQQBVFFCRwsdSPfZdCrqmylIsJtFYNx3Ux6qKblGJ5WNPG5uk9Mtj93gW
o/VwN4nCszFlxSFYqDDiD78BnqYsjOMQ+s3WiXVBzpCUy/yElwIDAQABo4IDVTCC
A1EwHQYDVR0OBBYEFA1Jr+d4azd2t8hAF8G35j0mwhwmMIHlBggrBgEFBQcBCwSB
2DCB1TCB0gYIKwYBBQUHMAuGgcVyc3luYzovL3Jwa2kuYXJpbi5uZXQvcmVwb3Np
dG9yeS9hcmluLXJwa2ktdGEvNWU0YTIzZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRh
MjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMzOS1hMmYzLTYyOTlhM2IwMmUyOS8yOTEx
MzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4MzVmYzE4ZTMvMzQwZGFlMGQtZTAxYi0z
YTRkLWJlYzAtYTRjM2YwYTljN2JjLnJvYTCB3AYDVR0fBIHUMIHRMIHOoIHLoIHI
hoHFcnN5bmM6Ly9ycGtpLmFyaW4ubmV0L3JlcG9zaXRvcnkvYXJpbi1ycGtpLXRh
LzVlNGEyM2VhLWU4MGEtNDAzZS1iMDhjLTIxNzFkYTIxNTdkMy9mNjBjOWYzMi1h
ODdjLTQzMzktYTJmMy02Mjk5YTNiMDJlMjkvMjkxMTMzZWItZTQzNi00ODAzLWFk
YWItZjM3ODM1ZmMxOGUzLzI5MTEzM2ViLWU0MzYtNDgwMy1hZGFiLWYzNzgzNWZj
MThlMy5jcmwwHwYDVR0jBBgwFoAUGFJJOvzvM+PyZJzzxguiUFoMHWswDgYDVR0P
AQH/BAQDAgeAMIHABggrBgEFBQcBAQSBszCBsDCBrQYIKwYBBQUHMAKGgaByc3lu
YzovL3Jwa2kuYXJpbi5uZXQvcmVwb3NpdG9yeS9hcmluLXJwa2ktdGEvNWU0YTIz
ZWEtZTgwYS00MDNlLWIwOGMtMjE3MWRhMjE1N2QzL2Y2MGM5ZjMyLWE4N2MtNDMz
OS1hMmYzLTYyOTlhM2IwMmUyOS8yOTExMzNlYi1lNDM2LTQ4MDMtYWRhYi1mMzc4
MzVmYzE4ZTMuY2VyMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQAQDGRMFQG
A1UdIAEB/wRKMEgwRgYIKwYBBQUHDgIwOjA4BggrBgEFBQcCARYsaHR0cHM6Ly93
d3cuYXJpbi5uZXQvcmVzb3VyY2VzL3Jwa2kvY3BzLmh0bWwwDQYJKoZIhvcNAQEL
BQADggEBAENZ+j/nSXSiItQkp9ioAER2waS/H3MinGOpnglKVCcX3H2Kyl9TOI/P
fmMN4sPc1ttcTO7uHEt1qFRL5cJ6P4cDUvI0gIg2RIorFAykCazAHN0rNaVGmbT9
Kv/kqhDEdAKYaikKN+V1w+++qhdI0SBcakUKDUrenUGOk/tbIxQOkZCb3vqZWqWO
eAJoz6MdukzUbRsKs0mBvbIaV0rAwKN6zEVn7xO+kj2naVC+SKzF4GmbY1+r8ExL
BwUybWpf53N7ELyHDzSq58a9kCIMVbB1YcxrqTcNc97Xg8whAcdSFBhhWJLpu2JP
SIFs5BrUtX0MkCWciXoXCjGV50P8uUg=
-----END CERTIFICATE-----
Generated at Mon Apr 28 01:05:00 2025 by rpki-client